new hijack this request - please analyze - receiving 'warning potential spyware operation' message

Here is an updated version after running a full Trend Micro scan, Rogue Remover, and SuperAntiSpyware, which found and quarantined several hundred cookies (adware) and two types of 'trojan'.  The popup is no longer appearing.  Am I 'clean'?

 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:07:26 AM, on 12/29/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
C:\PROGRA~1\MUSICM~1\MUSICM~3\MMDiag.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\DIGStream\digstream.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe
C:\Program Files\Roxio\Media Experience\DMXLauncher.exe
C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Trend Micro\Internet Security 12\TMAS_OE\TMAS_OEMon.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\PIXELA\ImageMixer for HDD Camcorder\IMx3Launcher.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Skyhook Wireless\Wi-Fi Service\WPSScannerSvc.exe
C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Kyle Riehle\Desktop\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://cm.my.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: TTB000000 - {62960D20-6D0D-1AB4-4BF1-95B0B5B8783A} - C:\WINDOWS\COUPON~1.DLL (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar5.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\Program Files\GoogleAFE\GoogleAE.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar5.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Corel Photo Downloader] C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
O4 - HKLM\..\Run: [DIGStream] C:\Program Files\DIGStream\digstream.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [DMXLauncher] "C:\Program Files\Roxio\Media Experience\DMXLauncher.exe"
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [lanmanwrk.exe] C:\WINDOWS\System32\lanmanwrk.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [OE_OEM] "C:\Program Files\Trend Micro\Internet Security 12\TMAS_OE\TMAS_OEMon.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O4 - Global Startup: Forget Me Not.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: ImageMixer for HDD Camcorder.lnk = ?
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O7 - HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {2DFF31F9-7893-4922-AF66-C9A1EB4EBB31} (Rhapsody Player Engine) - http://forms.real.com/real/player/download.html?f=windows/mrkt/rhapx/RhapsodyPlayerEngine_Inst_Win.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www.costcophotocenter.com/CostcoActivia.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O20 - AppInit_DLLs: murka.dat
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Intel® Quick Resume Technology Drivers (ELService) - Intel Corporation - C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Common Files\Sonic Shared\RoxioUPnPRenderer9.exe
O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Common Files\Sonic Shared\RoxioUpnpService9.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: WPS Scanner Service (WPSScannerSvc) - Skyhook Wireless - C:\Program Files\Skyhook Wireless\Wi-Fi Service\WPSScannerSvc.exe

--
End of file - 13436 bytes

C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@statse.webtrendslive[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wjnygjdjkao.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@hotlog[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-newegg.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@cgi-bin[4].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e2itg.pbteen[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@48986480[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@tracking.homeportfolio[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@giftscom.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@phg.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@shoplocl.adbureau[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@www0.dealtime[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@247realmedia[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@traffic.buyservices[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@www.ticketsnow[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@lyricsfind[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wfkiemczidq.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@commonsensemedia[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wjlikgcjcfp.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@pbteen[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-theactivenetwork.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@tgn.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@keywordmax[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wjl4uocpcgo.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@webstat.yamaha[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wjligjcpedp.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ehg-legacy.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@sales.liveperson[3].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-foxsports.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@thinkresources.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@www.clickmanage[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@xiti[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@reduxads.valuead[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wjnygjcpsho.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wjlikid5aho.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-bestbuy.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@linksynergy[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ehg-oreilly.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@pro-market[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@cneteurope.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@dealnews.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@clickbank[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@www.findgift[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ww2.pbteen[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-theviptour.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@scholastic.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wjkyemd5mdp.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@northwestairlines.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@statse.webtrendslive[3].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@findyourzencast[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@cgi-bin[7].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@primediabusiness.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ehg-ubid.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@findarticles[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-uniontrib.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@buycom.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ads.addesktop[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wfmyujajicq.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@sales.liveperson:emotion-29:.txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@data2.perf.overture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@overture-cnet.com[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@doubleclick.hertz[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@uk.sitestat[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ehg-closetmaid.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-viacom.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@www.pbteen[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@tracker.espsoftware[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@maxim.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ecnext.advertserve[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@cgi-bin:emotion-14:.txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wfliqldpccp.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@counter2.hitslink[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@luggagepointcom.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@sales.liveperson[4].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@superstats[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ehg-nbif.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@financialcontent.advertserve[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wjmycgdzgdo.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@www.storeyourmedia[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@server.iad.liveperson[3].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@122.2o7[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ehg-findlaw.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wfk4goc5olo.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ehg-olympus.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@www.americanflagandbanner[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@wpni.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@pathfinder[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@tripod[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@c3.zedo[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ads.topix[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@uk.sitestat[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@media.ford[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@yadro[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@www.ewebcounter[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ehg-stonetemple.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@adv.webmd[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@hc2.humanclick[3].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ads.pricescan[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wjnywmdpweq.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@elitedealssupport[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wgmigid5gfo.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wgk4kldjglo.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@homeclick[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@teenink[1].txt

C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wjkoshcpkfp.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@adserver.warpradio[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@kiplinger.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@media.www.michigandaily[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@mcclatchy.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@freefind[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@etoys.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@www.ez-tracks[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wbmiumdpado.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@richmedia.yahoo[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wfk4elazagp.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@4.adbrite[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-vitamix.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@teenidolsforyou[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@microsoftwlsearchcrm.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@entrepreneur.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@gcc[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ads2.ljworld[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@as-eu.falkag[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wjnycgd5mho.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@eas.apm.emediate[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wcmyeodjmkp.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@centralmediaserver[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wjlyakczoap.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@gpstracklog.typepad[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@adfarm1.adition[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ads.contactmusic[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-linksys.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ads.tbs[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@quill.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-salemwebnetworks.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@89451406[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@crackle[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@couponchief.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@1072738460[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wjliaodzolo.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wfk4gicpgkp.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@kroger.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wcmiklajmeq.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wgkokkcjskq.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ticketsnow.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@atlas.entrepreneur[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@006.free-counters.co[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@entrepreneur[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@m1.webstats.motigo[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@adserver.easyad[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@431412e061[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@optimize.indieclick[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@81433587[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@arbitrack[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@oasc08006.247realmedia[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@31953349[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@665717[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@rambler[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@www.burstnet[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@us.gamestracker[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@54969700[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wjliaic5afo.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@clicksor[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wjk4knc5mlq.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-thanedirect.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@www.coolsavings[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-kingstontechnology.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@www.fpctraffic2[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@www.sublimemedia[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@collective-media[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-starbucks.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@chokertraffic[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@nextag.co[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-ittoolbox.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@www.clickondetroit[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@1068702717[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@609151[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@teenforlove[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wckogkcpmdo.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wjny-1mcpsg.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@clickondetroit[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@70406058[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@coolsavings[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ads.techguy[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-ifilm.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@clickability[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@1.adbrite[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ads.dietsinreview[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@galleries.adult-empire[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@dcsi583rp10000oevcqz9y4us_6l6d[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@waterfrontmedia.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@classifiedventures1.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wclocgd5mlq.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@cdrmedia.cedarville[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@path.pureadstracking[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-zvents.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ads.adbrite[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@siliconmountainmemory.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ads3.blastro[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@findwhat[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@advertising[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@advertising[3].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@counter[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@mediacenter[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@tracker[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@advertising[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@advertising[3].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@b.serving-sys[1].txt

 

note:  THERE WAS AN 'S' AFTER THE 'B' IN THE ABOVE LINE - evidently can't use that combination of letters here.

part 3

 

C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@adecn[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@adrevolver[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@adopt.specificclick[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@statcounter[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@adbrite[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@teenmag[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@scot.valueclick[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@dealtime[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@counter.hitslink[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@trafficmp[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@hg1.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@stat.dealtime[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@laptopmag.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wjk4emdjecq.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ads.as4x.tmcs.ticketmaster[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@servlet[4].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@paypal.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ehg-traderpublishing.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@web4.realtracker[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ads.oneplace[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@74613876[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@cz8.clickzs[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@38297[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6whkogjcjchq.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wjkykpc5cko.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-tigerdirect2.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ticketcity[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@avsmedia[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@hertz.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@www.lyricsfind[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@z1.adserver[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@teenspace.cincinnatilibrary[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@media.adrevolver[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@screensavers[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@christianteens.about[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@kaboose.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@image.masterstats[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@adserver2.teracent[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@www.dietscamsexposed[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@web-stat[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@minibite.sitetracker[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wjmyqkdpoao.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-gamedaily.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wjliunazsfq.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wjlyuoazckp.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wjlicoczigq.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@data3.perf.overture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6whkygmc5mlp.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@www.ticketcity[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-hitent.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@cratebarrel.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-ticketcity.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@cgi-bin[3].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@rotator.adjuggler[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@list[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@xos.adbureau[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@bannerspace[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@targetnet[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ehg-knightridder.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@jewelrytelevision.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wjkoaic5gcp.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ads2.drivelinemedia[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wgkiqkc5ehp.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@stats.manticoretechnology[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@adserver.adreactor[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@espn360.channelfinder[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@usatoday1.112.2o7[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@www.macromedia[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ehg-bizjournals.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@pt.crossmediaservices[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@as-us.falkag[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ticketsnow[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ehg-channelwave.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wfmycjdjggo.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@bizrate[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@americanexpress.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@adlegend[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@msnportal.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@tradedoubler[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@leeenterprises.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@www.ticketsnow2[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6walikjczkdq.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@123stat[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@indextools[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-warnerbrothers.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wjny-1nczik.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-hollywoodmedia.hitbox[2].txt

part 6

 

C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wfkiqpd5kao.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@server2.bkvtrack[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ads.hairboutique[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@17492520[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wjnyenczmkq.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ads.traderonline[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ads.blog[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@server.iad.liveperson[11].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@prnewswire.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ez-tracks[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@pricesexposed[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@readersdigest.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@stats.privacyprotector[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@h.starware[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6whmiqidpofp.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@lab88inc.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@millermediavision[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@realnetworks.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@82544646[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ad1.clickhype[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@adultadworld[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wjlykgd5okq.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wfliqhdjoaq.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@stats1.clicktracks[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@borders.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-wyndhamvacationownership.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@bannerads[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@2.adbrite[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@maxmedia.educationworld[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wfk4aod5ebo.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wjkykhdjikq.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ad.uk.tangozebra[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@clicktracks.aristotle[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@network-ca.247realmedia[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@www.teenidols4you[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@affiliates.risingrevenue[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wcloggd5obq.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@bigten.channelfinder[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wfkyekcjakq.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wjk4omcpcgo.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ads.glispa[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6whkysidzsko.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-groupernetworks.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@tremor.adbureau[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wgk4enajkgp.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@valpak.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6whmicldjelp.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wfk4wldpceo.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@brightcove.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wjl4ugdzefo.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@counter.surfcounters[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@www.gamestracker[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@media.ds.ign[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-bestwestern.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@buzznet.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@try.starware[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@6868635[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@aoluk.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@webmd.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@interclick[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-bluegreencorp.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wjliskcpefq.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ice.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@journalregistercompany.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@enhance[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@newsok.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@www.xctrk[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@mediacollege[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@adserving.autotrader[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@eyewonder[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-stacksandstacks.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wjmisiajgkp.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wjlywjcpkap.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ads4.blastro[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@inet-traffic[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@i.screensavers[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ads.cartoondollemporium[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@hearstmagazines.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@vnet.valueclick[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@sixapart.adbureau[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@www.teenforlove[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wckowpcpsdo.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wfk4uhcpceo.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-space.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wflicjdjweq.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ads.evtv1[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@safaribooks.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wjk4kidpmao.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@www.teenhairstyles[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@3.adbrite[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ad.m5prod[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@hornymatches[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-associatednewmedia.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@adsensespytracker[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@kelleybluebook.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wblykicjsao.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@2109205[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wfliwidzeho.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@43517443[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@6229559[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ads.associatedcontent[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@cgi-bin[5].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@exitexchange[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wfkykiajchq.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@server.koadserver[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@cooking.adbureau[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@images.crossmediaservices[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@1071868927[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wjlosgdpago.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@heavycom.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@91603167[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wfmysidzmgp.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@S144732[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@clickaider[1].txt

part 5

 

C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ads.active[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@www.directnetadvertising[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ads.cnn[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-taubman.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@dealtime.co[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-luggageonline.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@sitestats.tiscali.co[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@tracking.foxnews[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-bareescentuals.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wjlikpd5oko.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@cnn.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@clickshift[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@nextstat[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@er4ddrtv.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ar.atwola[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@specificclick[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wjkyegazwgo.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wgkosndzmdq.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@tracking.webdiversity.co[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-allergybuyersclub.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@server.iad.liveperson[9].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wfk4knajeaq.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@adsrevenue[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ehg-ti.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wjlienczafo.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@eb.adbureau[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@www.findarticles[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@www2.addfreestats[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@adtech[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@creview.adbureau[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@www4.dealtime[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@41409448[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@chefscatalog.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@geosign.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@pro-market[3].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-nestleusainc.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@www.etracker[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@86350344[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@spamblockerutility[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@hc2.humanclick[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@popularscreensavers[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ehg-dermadoctor.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ads.expedia[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ehg-usoc.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ehg-vzw.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wbk4kmd5map.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wjny-1ncpag.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@highbeam.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@stats.crayola[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@statse.webtrendslive[5].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@sales.liveperson[5].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ulta.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ge.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@a.findarticles[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@data1.perf.overture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@cf-db01.clickfacts[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ehg-foxmovies.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@57386690[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wjkycidpslp.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@server.iad.liveperson:emotion-14:.txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@webstat[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ad[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ezzs.valueclick[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@server.iad.liveperson[7].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@try.screensavers[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wfkoemc5sfo.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@medhelpinternational.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@netshops.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ads.mediamayhemcorp[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@clicktracks.webmetro[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@shopping.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wflikjczefo.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@54137116[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@link.mercent[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@smileycentral[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@jdc3.clicktracks[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@track.bestbuy[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wfloundzwbo.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@marketlive.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@primedia.us.intellitxt[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wjkospcjeko.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@media.adrevolver[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@CAWRBID2.txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@teenhollywood[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ehg-verizonwireless.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wjk4omdjsfo.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@eyeblast.adbureau[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ehg-suite101.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@server.iad.liveperson[10].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wjmygldjmbp.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@sales.liveperson[9].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@adserver.emporis[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@S144706[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wjnychdjsdp.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@r-kimedia.co[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ehg-shoes.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@parentingteens.about[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@tracking.mos[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ads.bridgetrack[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@media.mtvnservices[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@indexstats[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@dillards.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wjkoupdzsaq.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@itxt.vibrantmedia[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@celebrateexpress.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@azjmp[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@findlaw[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ads.gametap[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@statse.webtrendslive[4].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@stats1.reliablestats[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@duluthtradingcompany.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@html[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wfmiukd5cbo.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-autozone.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@bannerads.zwire[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@adcache.bargaintraderonline[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@findicon[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@focalex[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@85084061[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@s.teenblvd[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@lsfnetwork.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@server.iad.liveperson[4].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-youtube.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wfkialdpoho.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ehg-lowermybills.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-jobster.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@metacafe.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wfmicndjafp.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@aff.primaryads[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@blizzardtracker[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-veohnetworksinc.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@www.elitedeals[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@footballfanatics.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@www.w3counter[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@teenidols4you[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wjlikndzofp.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ehg.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@1-click[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@bordersmedia[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ads.godtube[1].txt

Part 2

 

Trojan.LanMan/Rootkit
 HKLM\System\ControlSet001\Services\lanmandrv
 C:\WINDOWS\SYSTEM32\LANMANDRV.SYS
 HKLM\System\ControlSet003\Services\lanmandrv
 HKLM\System\CurrentControlSet\Services\lanmandrv
 C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP597\A0039101.SYS
 C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP611\A0040101.SYS
 C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP612\A0040212.SYS
 C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP613\A0041201.SYS
 C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP620\A0042201.SYS
 C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP621\A0042591.SYS
 C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP622\A0043561.SYS
 C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP622\A0044559.SYS
 C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP626\A0050563.SYS
 C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP626\A0050607.SYS
 C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP626\A0050627.SYS
 C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP626\A0050680.SYS
 C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP628\A0050737.SYS

Adware.Tracking Cookie
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@realmedia[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@roiservice[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@totalvid.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@zedo[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@revsci[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@icc.intellisrv[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@apmebf[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@overture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ads.addynamix[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@fastclick[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@kanoodle[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@www.burstbeacon[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@tacoda[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@stat.onestat[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@www.mysitetraffic[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ads.monster[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@saxotoledo.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@webstat[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wfkiwpdpsfo.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@doubleclick[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ads.pointroll[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@burstnet[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@a.websponsors[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@adinterax[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@shsdemo.stats[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@meijer.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@citi.bridgetrack[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@maxserving[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-etoys.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@e-2dj6wjnycpc5cgo.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@sales.liveperson[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@qnsr[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@casalemedia[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@adserver[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-accuweather.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@partner2profit[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@anad.tacoda[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@banners.decisionmark[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@questionmarket[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wgkighajecq.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@revenue[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@serving-sys[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@media.hotels[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wjkycpd5iao.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@tribalfusion[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@data4.perf.overture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ad.yieldmanager[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@www.teenreads[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@spylog[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@valueclick[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@vhost.oddcast[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6waliwoczeao.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@adrevolver[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@cbs.112.2o7[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@anat.tacoda[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@mediaplex[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@nextag[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ads.as4x.tmcs[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@valueclick[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@e-2dj6wjlislcjgbp.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@cgi-bin[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@trafficdashboard[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@belnk[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ads.guardian.co[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@statse.webtrendslive[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@commission-junction[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@atdmt[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@powellsbooks.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@qksrv[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle_riehle@ehg-camcorderinfo.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@beachcamera.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@register.screensaver[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ford.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@perf.overture[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@hc2.humanclick[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@atwola[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-dig.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@advertising[4].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@microsofteup.112.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@adopt.euroclick[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@edge.ru4[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@bluestreak[2].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@server.iad.liveperson[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@greatschools.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@ehg-techtarget.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Cookies\kyle riehle@b.serving-sys[1].txt

 

there was an s after the 'b' in the above line.  that combination of letters evidently isn't allowed.

part 8 (final)

 

C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@2o7[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@adbrite[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@adinterax[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@admarketplace[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@adopt.specificclick[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@adrevolver[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@adrevolver[3].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@ads.active[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@ads.addesktop[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@ads.addynamix[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@ads.cnn[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@ads.pointroll[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@advertising[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@americanexpress.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@anad.tacoda[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@apmebf[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@as-us.falkag[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@atdmt[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@atwola[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@bizrate.co[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@bizrate[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@bluestreak[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@burstnet[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@buycom.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@casalemedia[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@clickshift[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@cnn.122.2o7[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@cz3.clickzs[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@cz6.clickzs[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@data3.perf.overture[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@dealtime[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@doubleclick[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@e-2dj6wgk4snazkfo.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@e-2dj6wjkocncpebp.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@e-2dj6wjliunazsfq.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@e-2dj6wjloupazecq.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@e-2dj6wjmiagd5sgp.stats.esomniture[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@e-2dj6wjmyqid5ikp.stats.esomniture[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@edge.ru4[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@ehg-accuweather.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@ehg-bareescentuals.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@ehg-cygnusbm.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@ehg-dig.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@ehg-intuit.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@ehg-maniatv.hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@ehg-theactivenetwork.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@ehg-yves.hitbox[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@fastclick[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@hitbox[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@icc.intellisrv[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@image.masterstats[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@indextools[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@interclick[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@keywordmax[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@linksynergy[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@media.fastclick[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@mediaplex[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@nextag[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@overture[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@partner2profit[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@perf.overture[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@qksrv[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@questionmarket[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@realmedia[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@revsci[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@roiservice[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@sales.liveperson[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@server.iad.liveperson[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@specificclick[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@stat.dealtime[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@statcounter[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@statse.webtrendslive[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@stats[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@tacoda[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@trafficdashboard[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@trafficmp[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@tribalfusion[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@vhost.oddcast[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@www.burstbeacon[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@www.burstnet[1].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@www.clickmanage[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@www.nextag[2].txt
 C:\Documents and Settings\Kyle Riehle\Local Settings\Temp\Cookies\kyle riehle@zedo[1].txt

Trojan.Downloader-Gen/Suspicious
 C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP597\A0039130.EXE
 C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP621\A0042624.EXE
 C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP622\A0044596.EXE
 C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP626\A0050652.EXE
 C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP626\A0050653.EXE
 C:\WINDOWS\SYSTEM32\63394.EXE
 C:\WINDOWS\SYSTEM32\LANMANWRK.EXE
 C:\WINDOWS\Prefetch\LANMANWRK.EXE-26C55B79.pf

Completed as you described.  ComboFix log:

 

ComboFix 07-12-21.4 - Kyle Riehle 2007-12-29 10:59:53.1 - NTFSx86
Microsoft Windows XP Professional  5.1.2600.2.1252.1.1033.18.490 [GMT -5:00]
Running from: C:\Documents and Settings\Kyle Riehle\Desktop\ComboFix.exe
 * Created a new restore point
.

(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\system32\install.exe
C:\WINDOWS\system32\qmopt.dll

.
(((((((((((((((((((((((((((((((((((((((   Drivers/Services   )))))))))))))))))))))))))))))))))))))))))))))))))

.
-------\LEGACY_LANMANDRV

(((((((((((((((((((((((((   Files Created from 2007-11-28 to 2007-12-29  )))))))))))))))))))))))))))))))
.

2007-12-29 08:24 . 2007-12-29 11:06 284,704 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2007-12-29 08:24 . 2007-12-29 11:04 4,364 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx
2007-12-29 08:22 . 2007-12-29 08:22   d-------- C:\Program Files\ZoneAlarmSB
2007-12-29 08:22 . 2007-12-29 08:22   d-------- C:\Documents and Settings\All Users\Application Data\MailFrontier
2007-12-29 08:20 . 2007-12-29 10:58   d-------- C:\WINDOWS\Internet Logs
2007-12-28 23:42 . 2007-12-28 23:43   d-------- C:\Program Files\SUPERAntiSpyware
2007-12-28 23:42 . 2007-12-28 23:42   d-------- C:\Documents and Settings\Kyle Riehle\Application Data\SUPERAntiSpyware.com
2007-12-28 23:42 . 2007-12-28 23:42   d-------- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2007-12-28 23:06 . 2007-09-24 23:31 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2007-12-28 22:40 . 2007-12-28 22:40   d-------- C:\Program Files\RogueRemover FREE
2007-12-28 21:51 . 2007-12-28 21:51 9,216 --a------ C:\WINDOWS\system32\suspend.exe
2007-12-28 16:36 . 2007-12-28 16:36 8,704 --a------ C:\WINDOWS\medichi2.exe
2007-12-28 16:36 . 2007-12-28 16:36 6,144 --a------ C:\WINDOWS\murka.dat
2007-12-28 16:36 . 2007-12-28 16:36 4,608 --a------ C:\WINDOWS\medichi.exe
2007-12-28 16:34 . 2007-12-28 21:51 16,384 --a------ C:\WINDOWS\system32\users32.dat
2007-12-22 09:47 . 2007-12-22 09:47   d-------- C:\Program Files\iTunes
2007-12-22 09:47 . 2007-12-22 09:47   d-------- C:\Program Files\iPod
2007-12-22 09:47 . 2007-12-29 08:25 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2007-12-22 09:47 . 2007-12-22 09:47 1,409 --a------ C:\WINDOWS\QTFont.for
2007-12-22 09:43 . 2007-12-22 09:43   d----c--- C:\WINDOWS\system32\DRVSTORE
2007-12-22 09:43 . 2007-12-22 09:43   d-------- C:\Program Files\Common Files\Apple
2007-12-22 09:43 . 2007-12-22 09:43   d-------- C:\Documents and Settings\All Users\Application Data\Apple
2007-12-11 10:57 . 2007-12-11 10:57 65,536 --a------ C:\WINDOWS\system32\QuickTimeVR.qtx
2007-12-11 10:57 . 2007-12-11 10:57 49,152 --a------ C:\WINDOWS\system32\QuickTime.qts

.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-29 15:55 --------- d-----w C:\Documents and Settings\All Users\Application Data\DIGStream
2007-12-29 04:41 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2007-12-29 04:06 --------- d-----w C:\Program Files\Java
2007-12-29 02:51 4,224 ----a-w C:\WINDOWS\system32\drivers\beep.sys
2007-12-28 21:36 --------- d-----w C:\Program Files\DIGStream
2007-12-28 21:36 --------- d-----w C:\Program Files\DellSupport
2007-12-22 14:45 --------- d-----w C:\Program Files\QuickTime
2007-12-22 14:43 --------- d-----w C:\Program Files\Apple Software Update
2007-12-22 03:12 --------- d-----w C:\Program Files\Quicken
2007-12-17 20:26 --------- d-----w C:\Documents and Settings\Kyle Riehle\Application Data\Roxio
2007-12-11 23:33 --------- d-----w C:\Program Files\vanBasco's Karaoke Player
2007-12-10 21:11 --------- d-----w C:\Documents and Settings\Kyle Riehle\Application Data\Intuit
2007-12-09 01:21 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-12-09 01:21 --------- d-----w C:\Program Files\Common Files\AnswerWorks 4.0
2007-12-09 01:18 --------- d-----w C:\Program Files\TurboTax
2007-11-14 21:05 75,248 ----a-w C:\WINDOWS\zllsputility.exe
2007-11-13 10:25 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
.

(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{62960D20-6D0D-1AB4-4BF1-95B0B5B8783A}]
   C:\WINDOWS\COUPON~1.DLL

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA}]
2007-12-29 08:22 262144 --a------ C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88}
{2318C2B1-4965-11D4-9B18-009027A5CD4F}
{F0D4B239-DA4B-4DAF-81E4-DFEE4931A4AA}

[HKEY_CLASSES_ROOT\clsid\{f0d4b239-da4b-4daf-81e4-dfee4931a4aa}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{F0D4B239-DA4B-4DAF-81E4-DFEE4931A4AA}"= C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL [2007-12-29 08:22 262144]

[HKEY_CLASSES_ROOT\clsid\{f0d4b239-da4b-4daf-81e4-dfee4931a4aa}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OE_OEM"="C:\Program Files\Trend Micro\Internet Security 12\TMAS_OE\TMAS_OEMon.exe" [2007-12-28 16:34]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 11:24]
"H/PC Connection Agent"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe" [2006-06-26 16:13]
"updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 15:45]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 06:00]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-12-28 16:34]
"DellSupport"="C:\Program Files\DellSupport\DSAgnt.exe" [2007-12-28 16:34]
"Aim6"="" []
"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2007-06-21 14:06]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-09-29 15:01]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11]
"SigmatelSysTrayApp"="stsystra.exe" [2005-03-23 01:20 C:\WINDOWS\stsystra.exe]
"IAAnotif"="C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2007-12-28 16:34]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2007-12-28 16:34]
"IntelMeM"="C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe" [2007-12-28 16:34]
"DVDLauncher"="C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe" [2005-02-23 17:19]
"ISUSPM Startup"="C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" [2007-12-28 16:34]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2007-12-28 16:34]
"MimBoot"="C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe" [2006-01-18 14:00]
"pccguide.exe"="C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe" [2007-12-28 16:34]
"Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2007-12-28 16:34]
"HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2007-12-28 16:34]
"DXDllRegExe"="dxdllreg.exe" []
"DIGStream"="C:\Program Files\DIGStream\digstream.exe" [2007-12-28 16:34]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2007-12-28 16:34]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2007-12-28 16:34]
"RoxWatchTray"="C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2007-12-28 16:34]
"DMXLauncher"="C:\Program Files\Roxio\Media Experience\DMXLauncher.exe" [2007-12-28 16:34]
"RoxioDragToDisc"="C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe" [2007-12-28 16:34]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-12-11 10:56]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-12-11 12:10]
"ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2007-11-14 16:05]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 21:05:26]
America Online 9.0 Tray Icon.lnk - C:\Program Files\America Online 9.0\aoltray.exe [2006-02-16 23:41:58]
Forget Me Not.lnk - C:\Program Files\Broderbund\AG CreataCard\agremind.exe [2007-06-14 19:29:06]
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2003-09-16 05:19:24]
ImageMixer for HDD Camcorder.lnk - C:\Program Files\PIXELA\ImageMixer for HDD Camcorder\IMx3Launcher.exe [2006-12-25 20:31:42]
Quicken Scheduled Updates.lnk - C:\Program Files\Quicken\bagent.exe [2003-10-02 14:08:08]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL

R1 DLARTL_M;DLARTL_M;C:\WINDOWS\system32\Drivers\DLARTL_M.SYS [2006-08-01 19:06]
R3 Wpsnuio;WPS NDIS Usermode I/O Protocol;C:\WINDOWS\system32\DRIVERS\wpsnuio.sys [2007-05-16 18:50]
S3 TIEHDUSB;TIEHDUSB;C:\WINDOWS\system32\drivers\tiehdusb.sys [2004-02-04 10:27]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}]
\Shell\AutoRun\command - E:\setup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{be2f0d7d-799d-11db-b275-00038a000015}]
\Shell\AutoRun\command - L:\setupSNK.exe

.
Contents of the 'Scheduled Tasks' folder
"2007-12-17 14:01:00 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-29 11:06:33
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: C:\WINDOWS\Explorer.EXE [6.00.2900.3156]
-> C:\Program Files\Google\Google Desktop Search\GoogleDesktopDeskbar2.dll
-> C:\Program Files\Google\Google Desktop Search\GoogleDesktopHyper.dll
-> C:\Program Files\Google\Google Desktop Search\GoogleDesktopResources_en.dll
.
Completion time: 2007-12-29 11:09:29 - machine was rebooted
.
2007-12-29 01:59:53 --- E O F --- 

New HiJackThis log, after running combofix.

 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:10:53 AM, on 12/29/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Skyhook Wireless\Wi-Fi Service\WPSScannerSvc.exe
C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\ehome\ehtray.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PccGuide.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\DIGStream\digstream.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\PROGRA~1\MUSICM~1\MUSICM~3\MMDiag.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Roxio\Media Experience\DMXLauncher.exe
C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Trend Micro\Internet Security 12\TMAS_OE\TMAS_OEMon.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\PIXELA\ImageMixer for HDD Camcorder\IMx3Launcher.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\WINDOWS\system32\notepad.exe
C:\Documents and Settings\Kyle Riehle\Desktop\HiJack\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://cm.my.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: TTB000000 - {62960D20-6D0D-1AB4-4BF1-95B0B5B8783A} - C:\WINDOWS\COUPON~1.DLL (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar5.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\Program Files\GoogleAFE\GoogleAE.dll
O2 - BHO: ZoneAlarm Spy Blocker BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar5.dll
O3 - Toolbar: ZoneAlarm Spy Blocker - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
O4 - HKLM\..\Run: [DIGStream] C:\Program Files\DIGStream\digstream.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [DMXLauncher] "C:\Program Files\Roxio\Media Experience\DMXLauncher.exe"
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [OE_OEM] "C:\Program Files\Trend Micro\Internet Security 12\TMAS_OE\TMAS_OEMon.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O4 - Global Startup: Forget Me Not.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: ImageMixer for HDD Camcorder.lnk = ?
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {2DFF31F9-7893-4922-AF66-C9A1EB4EBB31} (Rhapsody Player Engine) - http://forms.real.com/real/player/download.html?f=windows/mrkt/rhapx/RhapsodyPlayerEngine_Inst_Win.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www.costcophotocenter.com/CostcoActivia.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Intel® Quick Resume Technology Drivers (ELService) - Intel Corporation - C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Common Files\Sonic Shared\RoxioUPnPRenderer9.exe
O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Common Files\Sonic Shared\RoxioUpnpService9.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: WPS Scanner Service (WPSScannerSvc) - Skyhook Wireless - C:\Program Files\Skyhook Wireless\Wi-Fi Service\WPSScannerSvc.exe

--
End of file - 13631 bytes

New HiJackThis Log:

 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:10:41 PM, on 12/29/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Skyhook Wireless\Wi-Fi Service\WPSScannerSvc.exe
C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\DIGStream\digstream.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\PROGRA~1\MUSICM~1\MUSICM~3\MMDiag.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Roxio\Media Experience\DMXLauncher.exe
C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe
C:\Program Files\Trend Micro\Internet Security 12\TMAS_OE\TMAS_OEMon.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\PIXELA\ImageMixer for HDD Camcorder\IMx3Launcher.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Documents and Settings\Kyle Riehle\Desktop\HiJack\HiJackThis.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Trend Micro\Internet Security 12\pccmain.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PccGuide.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://cm.my.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: TTB000000 - {62960D20-6D0D-1AB4-4BF1-95B0B5B8783A} - C:\WINDOWS\COUPON~1.DLL (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar5.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\Program Files\GoogleAFE\GoogleAE.dll
O2 - BHO: ZoneAlarm Spy Blocker BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar5.dll
O3 - Toolbar: ZoneAlarm Spy Blocker - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
O4 - HKLM\..\Run: [DIGStream] C:\Program Files\DIGStream\digstream.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [DMXLauncher] "C:\Program Files\Roxio\Media Experience\DMXLauncher.exe"
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [OE_OEM] "C:\Program Files\Trend Micro\Internet Security 12\TMAS_OE\TMAS_OEMon.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O4 - Global Startup: Forget Me Not.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: ImageMixer for HDD Camcorder.lnk = ?
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {2DFF31F9-7893-4922-AF66-C9A1EB4EBB31} (Rhapsody Player Engine) - http://forms.real.com/real/player/download.html?f=windows/mrkt/rhapx/RhapsodyPlayerEngine_Inst_Win.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www.costcophotocenter.com/CostcoActivia.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Intel® Quick Resume Technology Drivers (ELService) - Intel Corporation - C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Common Files\Sonic Shared\RoxioUPnPRenderer9.exe
O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Common Files\Sonic Shared\RoxioUpnpService9.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: WPS Scanner Service (WPSScannerSvc) - Skyhook Wireless - C:\Program Files\Skyhook Wireless\Wi-Fi Service\WPSScannerSvc.exe

--
End of file - 13422 bytes